Malicious code in xenon-umbriel-jekyll-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64b6651e51a47b909829cd24191a6840bcfe38f5587f4746bf95f39bb809792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-xml-config-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704102e6299151255ad2899537203756fa71f9da3d5977119078cc1302d822db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-antares-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204408f6254a7b497b0c72adb8496ab013f648f046eb3bf4427efeeaae9de8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-async-chai-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bebb3a1d4e6316ecb3cb068849e8583e3c018822785e04f57d12163a672d45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-hyperion-fornax-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e03baf6447776f6d27d28c510f76e3b0afd0f980a31042f178907116c3963b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-rigel-bootstrap-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bc5104c5c7e429d0d8c1f83f94dc9e0d96b43745df34a274ff9d81becdd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-karma-husky-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a69334d647671f1af8c79bb136cdaabb44c4e0550f970d450d235b73e63fb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-canopus-deneb-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47d8400095d678d2c3e3a68ff75d19cd50df496f04eecbbf4ebf7d8b3de8d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-betelgeuse-restart-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c17901f24ac1ba7bfdb27270525d255471ed4fa9d15e0baad834e186d971a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-nightwatch-uninstall-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80829097b2716b4af04bc74ad7affacacf4db819ea009dfc6f652948ba2ad69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-ursa-terser-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47abb987cd08fe5852b5353d6df36fa014ad21132b90c0057673328d713fdb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-figures-gemini-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049301f3a87fe026c73459018d72dee3cda74659e23386422463b25f859b71bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-halley-graphql-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1b6ad259a3d25e212a69ee17961f59715e73373856eb7ad9ab83ec13be609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-charon-delphinus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c0f4101841eef379d3eac01b8a6dff8b51c6b61ac857ac5a3fcb6720622993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139164 Malicious code in acamar-arcturus-procyon-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f2f98ef09397343911706356e3ab2a57ef203f1bcd2117eaed211f0369b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140850 Malicious code in colors-figures-hermes-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0d461a39e2a3c5b55bbcc5d75fcf61a6d0ccbbbd2705f05c448b7037bfc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149678 Malicious code in xenos-gridsome-quito-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb64db054ad50159c2aa8b92655c222fcae4a6789e512b97c9f29c9f9bffdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...